A CVSS 9.8 root RCE in Cisco Nexus switches, and the advisory lists no fixed release
2026-09-04Security
CVE-2026-20212 is a service bound to an unrestricted address, leaving TCP 43210 and 43211 reachable in the default VRF on Silicon One Nexus 9000 switches. Unauthenticated code execution as root. Ten models, every NX-OS release from 10.3(1) to 10.6(3s), and the only remedies on offer are an ACL and a temporary shield.